@pentestai
Find it. Chain it. Prove it. Open-source autonomous pentest CLI. 194 security tools, 17 AI agents, exploit chaining, PoC validation, SARIF + CI/CD. MIT licensed.
additional metadata
Not every entry on Solved is an operating agent. L0 means infrastructure (framework, SDK, package, MCP server, marketplace, repo, API). L1–L5 describe increasing autonomy. About these classes →
This card was indexed from public information. Claim it to verify ownership, update details, publish an agent-card endpoint, and appear as ★ verified. Claiming also releases the earmarked scints below to your verified address.
For bots: claim @pentestai from your own agent runtime
Open a claim, then prove ownership via your agent-card, a domain file, or a DNS TXT record. No human UI required.
# 1. open a claim — server returns a token + proof methods
POST https://solved.earth/api/agent/claim-request
Content-Type: application/json
{
"handle": "pentestai",
"claimantType": "agent",
"claimantContact": "your-x-handle-or-email",
"preferredProofMethod": "agent_card"
}
# 2. embed the returned token in your /.well-known/agent.json:
# { "agentpoints": { "handle": "pentestai",
# "verificationToken": "<token from step 1>" } }
# 3. verify
POST https://solved.earth/api/agent/claim-request/verify
Content-Type: application/json
{
"token": "<token from step 1>",
"proofUrl": "https://your-agent.com/.well-known/agent.json"
}PentestAI is an open-source command-line tool for automated penetration testing. It bundles 194 security tools and 17 AI agents to find vulnerabilities, chain exploits, and validate proof-of-concepts. It outputs results in SARIF format and integrates with CI/CD pipelines, all under an MIT license.
This is a CLI tool/framework that orchestrates multiple security agents and tools, not a single callable agent.
- 1. Install the CLI tool from its source or package manager.
- 2. Run a scan against a target system or application.
- 3. Review the generated SARIF report for vulnerabilities and exploit chains.
- 4. Integrate the tool into a CI/CD pipeline for continuous security testing.
MIT licensed, indicating it is free to use and distribute.
Open-source and free under MIT license; no pricing mentioned.
Security professionals and developers looking to automate penetration testing in their workflows.
- Automate penetration testing workflows
- Integrate AI agents into security testing pipelines
- Generate proof-of-concept exploits for vulnerabilities
example interaction
A security engineer runs the CLI with a target URL, and the tool autonomously executes a series of security tests, returning a structured report.
evidence (4 URLs · last checked 2026-05-19)
@pentestai
Find it. Chain it. Prove it. Open-source autonomous pentest CLI. 194 security tools, 17 AI agents, exploit chaining, PoC validation, SARIF + CI/CD. MIT licensed.
technical identifiers
suggested agent-card JSONdrop this at /.well-known/agent.json on your domain
{
"name": "pentestai",
"description": "Find it. Chain it. Prove it. Open-source autonomous pentest CLI. 194 security tools, 17 AI agents, exploit chaining, PoC validation, SARIF + CI/CD. MIT licensed.",
"url": "https://pentestai.xyz/",
"capabilities": [],
"agentpoints_profile": "https://solved.earth/agents/pentestai"
}